#ifndef _GRAPH_FAKE_ASSETS_HPP
#define _GRAPH_FAKE_ASSETS_HPP

namespace graph
{
namespace assets
{

auto constexpr DECODER = R"e({
    "name": "decoder/core-hostinfo/0",
    "check": [
        {
        "wazuh.queue": 51
        }
    ],
    "normalize": [
        {
        "map": [
            {
            "wazuh.decoders": "array_append(core-hostinfo)"
            }
        ]
        }
    ]
    })e";

auto constexpr FILTER = R"({
    "name": "filter/allow-all/0"
})";

auto constexpr INTEGRATION = R"({
    "decoders": [
        "decoder/core-hostinfo/0"
    ],
    "filters": [
        "filter/allow-all/0"
    ],
    "name": "integration/wazuh-core/0"
})";

auto constexpr POLICY = R"({
    "name": "policy/wazuh/0",
    "integrations": [
        "integration/wazuh-core/0"
    ]
})";

auto constexpr WAZUH_LOGPAR_TYPES = R"({
    "name": "schema/wazuh-logpar-types/0",
    "fields": {
        "@timestamp": "date",
        "agent.build.original": "keyword",
        "agent.ephemeral_id": "keyword",
        "agent.id": "keyword",
        "agent.name": "keyword",
        "agent.type": "keyword",
        "agent.version": "keyword",
        "client.address": "keyword",
        "client.as.number": "long",
        "client.as.organization.name": "keyword",
        "client.bytes": "long",
        "client.domain": "keyword",
        "client.geo.city_name": "keyword",
        "client.geo.continent_code": "keyword",
        "client.geo.continent_name": "keyword",
        "client.geo.country_iso_code": "keyword",
        "client.geo.country_name": "keyword",
        "client.geo.location": "geo_point",
        "client.geo.name": "keyword",
        "client.geo.postal_code": "keyword",
        "client.geo.region_iso_code": "keyword",
        "client.geo.region_name": "keyword",
        "client.geo.timezone": "keyword",
        "client.ip": "ip",
        "client.mac": "keyword",
        "client.nat.ip": "ip",
        "client.nat.port": "long",
        "client.packets": "long",
        "client.port": "long",
        "client.registered_domain": "keyword",
        "client.subdomain": "keyword",
        "client.top_level_domain": "keyword",
        "client.user.domain": "keyword",
        "client.user.email": "keyword",
        "client.user.full_name": "keyword",
        "client.user.group.domain": "keyword",
        "client.user.group.id": "keyword",
        "client.user.group.name": "keyword",
        "client.user.hash": "keyword",
        "client.user.id": "keyword",
        "client.user.name": "keyword",
        "client.user.risk.calculated_level": "keyword",
        "client.user.risk.calculated_score": "float",
        "client.user.risk.calculated_score_norm": "float",
        "client.user.risk.static_level": "keyword",
        "client.user.risk.static_score": "float",
        "client.user.risk.static_score_norm": "float",
        "cloud.account.id": "keyword",
        "cloud.account.name": "keyword",
        "cloud.availability_zone": "keyword",
        "cloud.instance.id": "keyword",
        "cloud.instance.name": "keyword",
        "cloud.machine.type": "keyword",
        "cloud.origin.account.id": "keyword",
        "cloud.origin.account.name": "keyword",
        "cloud.origin.availability_zone": "keyword",
        "cloud.origin.instance.id": "keyword",
        "cloud.origin.instance.name": "keyword",
        "cloud.origin.machine.type": "keyword",
        "cloud.origin.project.id": "keyword",
        "cloud.origin.project.name": "keyword",
        "cloud.origin.provider": "keyword",
        "cloud.origin.region": "keyword",
        "cloud.origin.service.name": "keyword",
        "cloud.project.id": "keyword",
        "cloud.project.name": "keyword",
        "cloud.provider": "keyword",
        "cloud.region": "keyword",
        "cloud.service.name": "keyword",
        "cloud.target.account.id": "keyword",
        "cloud.target.account.name": "keyword",
        "cloud.target.availability_zone": "keyword",
        "cloud.target.instance.id": "keyword",
        "cloud.target.instance.name": "keyword",
        "cloud.target.machine.type": "keyword",
        "cloud.target.project.id": "keyword",
        "cloud.target.project.name": "keyword",
        "cloud.target.provider": "keyword",
        "cloud.target.region": "keyword",
        "cloud.target.service.name": "keyword",
        "container.cpu.usage": "scaled_float",
        "container.disk.read.bytes": "long",
        "container.disk.write.bytes": "long",
        "container.id": "keyword",
        "container.image.name": "keyword",
        "container.memory.usage": "scaled_float",
        "container.name": "keyword",
        "container.network.egress.bytes": "long",
        "container.network.ingress.bytes": "long",
        "container.runtime": "keyword",
        "data_stream.dataset": "keyword",
        "data_stream.namespace": "keyword",
        "data_stream.type": "keyword",
        "destination.address": "keyword",
        "destination.as.number": "long",
        "destination.as.organization.name": "keyword",
        "destination.bytes": "long",
        "destination.domain": "keyword",
        "destination.geo.city_name": "keyword",
        "destination.geo.continent_code": "keyword",
        "destination.geo.continent_name": "keyword",
        "destination.geo.country_iso_code": "keyword",
        "destination.geo.country_name": "keyword",
        "destination.geo.location": "geo_point",
        "destination.geo.name": "keyword",
        "destination.geo.postal_code": "keyword",
        "destination.geo.region_iso_code": "keyword",
        "destination.geo.region_name": "keyword",
        "destination.geo.timezone": "keyword",
        "destination.ip": "ip",
        "destination.mac": "keyword",
        "destination.nat.ip": "ip",
        "destination.nat.port": "long",
        "destination.packets": "long",
        "destination.port": "long",
        "destination.registered_domain": "keyword",
        "destination.subdomain": "keyword",
        "destination.top_level_domain": "keyword",
        "destination.user.domain": "keyword",
        "destination.user.email": "keyword",
        "destination.user.full_name": "keyword",
        "destination.user.group.domain": "keyword",
        "destination.user.group.id": "keyword",
        "destination.user.group.name": "keyword",
        "destination.user.hash": "keyword",
        "destination.user.id": "keyword",
        "destination.user.name": "keyword",
        "destination.user.risk.calculated_level": "keyword",
        "destination.user.risk.calculated_score": "float",
        "destination.user.risk.calculated_score_norm": "float",
        "destination.user.risk.static_level": "keyword",
        "destination.user.risk.static_score": "float",
        "destination.user.risk.static_score_norm": "float",
        "dll.code_signature.digest_algorithm": "keyword",
        "dll.code_signature.exists": "boolean",
        "dll.code_signature.signing_id": "keyword",
        "dll.code_signature.status": "keyword",
        "dll.code_signature.subject_name": "keyword",
        "dll.code_signature.team_id": "keyword",
        "dll.code_signature.timestamp": "date",
        "dll.code_signature.trusted": "boolean",
        "dll.code_signature.valid": "boolean",
        "dll.hash.md5": "keyword",
        "dll.hash.sha1": "keyword",
        "dll.hash.sha256": "keyword",
        "dll.hash.sha384": "keyword",
        "dll.hash.sha512": "keyword",
        "dll.hash.ssdeep": "keyword",
        "dll.hash.tlsh": "keyword",
        "dll.name": "keyword",
        "dll.path": "keyword",
        "dll.pe.architecture": "keyword",
        "dll.pe.company": "keyword",
        "dll.pe.description": "keyword",
        "dll.pe.file_version": "keyword",
        "dll.pe.imphash": "keyword",
        "dll.pe.original_file_name": "keyword",
        "dll.pe.pehash": "keyword",
        "dll.pe.product": "keyword",
        "dns.id": "keyword",
        "dns.op_code": "keyword",
        "dns.question.class": "keyword",
        "dns.question.name": "keyword",
        "dns.question.registered_domain": "keyword",
        "dns.question.subdomain": "keyword",
        "dns.question.top_level_domain": "keyword",
        "dns.question.type": "keyword",
        "dns.response_code": "keyword",
        "dns.type": "keyword",
        "ecs.version": "keyword",
        "email.content_type": "keyword",
        "email.delivery_timestamp": "date",
        "email.direction": "keyword",
        "email.local_id": "keyword",
        "email.message_id": "keyword",
        "email.origination_timestamp": "date",
        "email.sender.address": "keyword",
        "email.subject": "keyword",
        "email.x_mailer": "keyword",
        "error.code": "keyword",
        "error.id": "keyword",
        "error.message": "text",
        "error.stack_trace": "keyword",
        "error.type": "keyword",
        "event.action": "keyword",
        "event.agent_id_status": "keyword",
        "event.code": "keyword",
        "event.created": "date",
        "event.dataset": "keyword",
        "event.duration": "long",
        "event.end": "date",
        "event.hash": "keyword",
        "event.id": "keyword",
        "event.ingested": "date",
        "event.kind": "keyword",
        "event.module": "keyword",
        "event.original": "keyword",
        "event.outcome": "keyword",
        "event.provider": "keyword",
        "event.reason": "keyword",
        "event.reference": "keyword",
        "event.risk_score": "float",
        "event.risk_score_norm": "float",
        "event.sequence": "long",
        "event.severity": "long",
        "event.start": "date",
        "event.timezone": "keyword",
        "event.url": "keyword",
        "faas.coldstart": "boolean",
        "faas.execution": "keyword",
        "faas.id": "keyword",
        "faas.name": "keyword",
        "faas.version": "keyword",
        "file.accessed": "date",
        "file.code_signature.digest_algorithm": "keyword",
        "file.code_signature.exists": "boolean",
        "file.code_signature.signing_id": "keyword",
        "file.code_signature.status": "keyword",
        "file.code_signature.subject_name": "keyword",
        "file.code_signature.team_id": "keyword",
        "file.code_signature.timestamp": "date",
        "file.code_signature.trusted": "boolean",
        "file.code_signature.valid": "boolean",
        "file.created": "date",
        "file.ctime": "date",
        "file.device": "keyword",
        "file.directory": "keyword",
        "file.drive_letter": "keyword",
        "file.elf.architecture": "keyword",
        "file.elf.byte_order": "keyword",
        "file.elf.cpu_type": "keyword",
        "file.elf.creation_date": "date",
        "file.elf.header.abi_version": "keyword",
        "file.elf.header.class": "keyword",
        "file.elf.header.data": "keyword",
        "file.elf.header.entrypoint": "long",
        "file.elf.header.object_version": "keyword",
        "file.elf.header.os_abi": "keyword",
        "file.elf.header.type": "keyword",
        "file.elf.header.version": "keyword",
        "file.elf.telfhash": "keyword",
        "file.extension": "keyword",
        "file.fork_name": "keyword",
        "file.gid": "keyword",
        "file.group": "keyword",
        "file.hash.md5": "keyword",
        "file.hash.sha1": "keyword",
        "file.hash.sha256": "keyword",
        "file.hash.sha384": "keyword",
        "file.hash.sha512": "keyword",
        "file.hash.ssdeep": "keyword",
        "file.hash.tlsh": "keyword",
        "file.inode": "keyword",
        "file.mime_type": "keyword",
        "file.mode": "keyword",
        "file.mtime": "date",
        "file.name": "keyword",
        "file.owner": "keyword",
        "file.path": "keyword",
        "file.pe.architecture": "keyword",
        "file.pe.company": "keyword",
        "file.pe.description": "keyword",
        "file.pe.file_version": "keyword",
        "file.pe.imphash": "keyword",
        "file.pe.original_file_name": "keyword",
        "file.pe.pehash": "keyword",
        "file.pe.product": "keyword",
        "file.size": "long",
        "file.target_path": "keyword",
        "file.type": "keyword",
        "file.uid": "keyword",
        "file.x509.issuer.distinguished_name": "keyword",
        "file.x509.not_after": "date",
        "file.x509.not_before": "date",
        "file.x509.public_key_algorithm": "keyword",
        "file.x509.public_key_curve": "keyword",
        "file.x509.public_key_exponent": "long",
        "file.x509.public_key_size": "long",
        "file.x509.serial_number": "keyword",
        "file.x509.signature_algorithm": "keyword",
        "file.x509.subject.distinguished_name": "keyword",
        "file.x509.version_number": "keyword",
        "group.domain": "keyword",
        "group.id": "keyword",
        "group.name": "keyword",
        "host.architecture": "keyword",
        "host.boot.id": "keyword",
        "host.cpu.usage": "scaled_float",
        "host.disk.read.bytes": "long",
        "host.disk.write.bytes": "long",
        "host.domain": "keyword",
        "host.geo.city_name": "keyword",
        "host.geo.continent_code": "keyword",
        "host.geo.continent_name": "keyword",
        "host.geo.country_iso_code": "keyword",
        "host.geo.country_name": "keyword",
        "host.geo.location": "geo_point",
        "host.geo.name": "keyword",
        "host.geo.postal_code": "keyword",
        "host.geo.region_iso_code": "keyword",
        "host.geo.region_name": "keyword",
        "host.geo.timezone": "keyword",
        "host.hostname": "keyword",
        "host.id": "keyword",
        "host.name": "keyword",
        "host.network.egress.bytes": "long",
        "host.network.egress.packets": "long",
        "host.network.ingress.bytes": "long",
        "host.network.ingress.packets": "long",
        "host.os.family": "keyword",
        "host.os.full": "keyword",
        "host.os.kernel": "keyword",
        "host.os.name": "keyword",
        "host.os.platform": "keyword",
        "host.os.type": "keyword",
        "host.os.version": "keyword",
        "host.pid_ns_ino": "keyword",
        "host.risk.calculated_level": "keyword",
        "host.risk.calculated_score": "float",
        "host.risk.calculated_score_norm": "float",
        "host.risk.static_level": "keyword",
        "host.risk.static_score": "float",
        "host.risk.static_score_norm": "float",
        "host.type": "keyword",
        "host.uptime": "long",
        "http.request.body.bytes": "long",
        "http.request.body.content": "keyword",
        "http.request.bytes": "long",
        "http.request.id": "keyword",
        "http.request.method": "keyword",
        "http.request.mime_type": "keyword",
        "http.request.referrer": "keyword",
        "http.response.body.bytes": "long",
        "http.response.body.content": "keyword",
        "http.response.bytes": "long",
        "http.response.mime_type": "keyword",
        "http.response.status_code": "long",
        "http.version": "keyword",
        "log.file.path": "keyword",
        "log.level": "keyword",
        "log.logger": "keyword",
        "log.origin.file.line": "long",
        "log.origin.file.name": "keyword",
        "log.origin.function": "keyword",
        "message": "text",
        "network.application": "keyword",
        "network.bytes": "long",
        "network.community_id": "keyword",
        "network.direction": "keyword",
        "network.forwarded_ip": "ip",
        "network.iana_number": "keyword",
        "network.name": "keyword",
        "network.packets": "long",
        "network.protocol": "keyword",
        "network.transport": "keyword",
        "network.type": "keyword",
        "network.vlan.id": "keyword",
        "network.vlan.name": "keyword",
        "observer.geo.city_name": "keyword",
        "observer.geo.continent_code": "keyword",
        "observer.geo.continent_name": "keyword",
        "observer.geo.country_iso_code": "keyword",
        "observer.geo.country_name": "keyword",
        "observer.geo.location": "geo_point",
        "observer.geo.name": "keyword",
        "observer.geo.postal_code": "keyword",
        "observer.geo.region_iso_code": "keyword",
        "observer.geo.region_name": "keyword",
        "observer.geo.timezone": "keyword",
        "observer.hostname": "keyword",
        "observer.name": "keyword",
        "observer.os.family": "keyword",
        "observer.os.full": "keyword",
        "observer.os.kernel": "keyword",
        "observer.os.name": "keyword",
        "observer.os.platform": "keyword",
        "observer.os.type": "keyword",
        "observer.os.version": "keyword",
        "observer.product": "keyword",
        "observer.serial_number": "keyword",
        "observer.type": "keyword",
        "observer.vendor": "keyword",
        "observer.version": "keyword",
        "orchestrator.api_version": "keyword",
        "orchestrator.cluster.id": "keyword",
        "orchestrator.cluster.name": "keyword",
        "orchestrator.cluster.url": "keyword",
        "orchestrator.cluster.version": "keyword",
        "orchestrator.namespace": "keyword",
        "orchestrator.organization": "keyword",
        "orchestrator.resource.id": "keyword",
        "orchestrator.resource.name": "keyword",
        "orchestrator.resource.parent.type": "keyword",
        "orchestrator.resource.type": "keyword",
        "orchestrator.type": "keyword",
        "organization.id": "keyword",
        "organization.name": "keyword",
        "package.architecture": "keyword",
        "package.build_version": "keyword",
        "package.checksum": "keyword",
        "package.description": "keyword",
        "package.install_scope": "keyword",
        "package.installed": "date",
        "package.license": "keyword",
        "package.name": "keyword",
        "package.path": "keyword",
        "package.reference": "keyword",
        "package.size": "long",
        "package.type": "keyword",
        "package.version": "keyword",
        "process.args_count": "long",
        "process.code_signature.digest_algorithm": "keyword",
        "process.code_signature.exists": "boolean",
        "process.code_signature.signing_id": "keyword",
        "process.code_signature.status": "keyword",
        "process.code_signature.subject_name": "keyword",
        "process.code_signature.team_id": "keyword",
        "process.code_signature.timestamp": "date",
        "process.code_signature.trusted": "boolean",
        "process.code_signature.valid": "boolean",
        "process.command_line": "keyword",
        "process.elf.architecture": "keyword",
        "process.elf.byte_order": "keyword",
        "process.elf.cpu_type": "keyword",
        "process.elf.creation_date": "date",
        "process.elf.header.abi_version": "keyword",
        "process.elf.header.class": "keyword",
        "process.elf.header.data": "keyword",
        "process.elf.header.entrypoint": "long",
        "process.elf.header.object_version": "keyword",
        "process.elf.header.os_abi": "keyword",
        "process.elf.header.type": "keyword",
        "process.elf.header.version": "keyword",
        "process.elf.telfhash": "keyword",
        "process.end": "date",
        "process.entity_id": "keyword",
        "process.entry_leader.args_count": "long",
        "process.entry_leader.attested_groups.name": "keyword",
        "process.entry_leader.attested_user.id": "keyword",
        "process.entry_leader.attested_user.name": "keyword",
        "process.entry_leader.command_line": "keyword",
        "process.entry_leader.entity_id": "keyword",
        "process.entry_leader.entry_meta.source.ip": "ip",
        "process.entry_leader.entry_meta.type": "keyword",
        "process.entry_leader.executable": "keyword",
        "process.entry_leader.group.id": "keyword",
        "process.entry_leader.group.name": "keyword",
        "process.entry_leader.interactive": "boolean",
        "process.entry_leader.name": "keyword",
        "process.entry_leader.parent.entity_id": "keyword",
        "process.entry_leader.parent.pid": "long",
        "process.entry_leader.parent.session_leader.entity_id": "keyword",
        "process.entry_leader.parent.session_leader.pid": "long",
        "process.entry_leader.parent.session_leader.start": "date",
        "process.entry_leader.parent.start": "date",
        "process.entry_leader.pid": "long",
        "process.entry_leader.real_group.id": "keyword",
        "process.entry_leader.real_group.name": "keyword",
        "process.entry_leader.real_user.id": "keyword",
        "process.entry_leader.real_user.name": "keyword",
        "process.entry_leader.same_as_process": "boolean",
        "process.entry_leader.saved_group.id": "keyword",
        "process.entry_leader.saved_group.name": "keyword",
        "process.entry_leader.saved_user.id": "keyword",
        "process.entry_leader.saved_user.name": "keyword",
        "process.entry_leader.start": "date",
        "process.entry_leader.supplemental_groups.id": "keyword",
        "process.entry_leader.supplemental_groups.name": "keyword",
        "process.entry_leader.user.id": "keyword",
        "process.entry_leader.user.name": "keyword",
        "process.entry_leader.working_directory": "keyword",
        "process.executable": "keyword",
        "process.exit_code": "long",
        "process.group_leader.args_count": "long",
        "process.group_leader.command_line": "keyword",
        "process.group_leader.entity_id": "keyword",
        "process.group_leader.executable": "keyword",
        "process.group_leader.group.id": "keyword",
        "process.group_leader.group.name": "keyword",
        "process.group_leader.interactive": "boolean",
        "process.group_leader.name": "keyword",
        "process.group_leader.pid": "long",
        "process.group_leader.real_group.id": "keyword",
        "process.group_leader.real_group.name": "keyword",
        "process.group_leader.real_user.id": "keyword",
        "process.group_leader.real_user.name": "keyword",
        "process.group_leader.same_as_process": "boolean",
        "process.group_leader.saved_group.id": "keyword",
        "process.group_leader.saved_group.name": "keyword",
        "process.group_leader.saved_user.id": "keyword",
        "process.group_leader.saved_user.name": "keyword",
        "process.group_leader.start": "date",
        "process.group_leader.supplemental_groups.id": "keyword",
        "process.group_leader.supplemental_groups.name": "keyword",
        "process.group_leader.user.id": "keyword",
        "process.group_leader.user.name": "keyword",
        "process.group_leader.working_directory": "keyword",
        "process.hash.md5": "keyword",
        "process.hash.sha1": "keyword",
        "process.hash.sha256": "keyword",
        "process.hash.sha384": "keyword",
        "process.hash.sha512": "keyword",
        "process.hash.ssdeep": "keyword",
        "process.hash.tlsh": "keyword",
        "process.interactive": "boolean",
        "process.name": "keyword",
        "process.parent.args_count": "long",
        "process.parent.code_signature.digest_algorithm": "keyword",
        "process.parent.code_signature.exists": "boolean",
        "process.parent.code_signature.signing_id": "keyword",
        "process.parent.code_signature.status": "keyword",
        "process.parent.code_signature.subject_name": "keyword",
        "process.parent.code_signature.team_id": "keyword",
        "process.parent.code_signature.timestamp": "date",
        "process.parent.code_signature.trusted": "boolean",
        "process.parent.code_signature.valid": "boolean",
        "process.parent.command_line": "keyword",
        "process.parent.elf.architecture": "keyword",
        "process.parent.elf.byte_order": "keyword",
        "process.parent.elf.cpu_type": "keyword",
        "process.parent.elf.creation_date": "date",
        "process.parent.elf.header.abi_version": "keyword",
        "process.parent.elf.header.class": "keyword",
        "process.parent.elf.header.data": "keyword",
        "process.parent.elf.header.entrypoint": "long",
        "process.parent.elf.header.object_version": "keyword",
        "process.parent.elf.header.os_abi": "keyword",
        "process.parent.elf.header.type": "keyword",
        "process.parent.elf.header.version": "keyword",
        "process.parent.elf.telfhash": "keyword",
        "process.parent.end": "date",
        "process.parent.entity_id": "keyword",
        "process.parent.executable": "keyword",
        "process.parent.exit_code": "long",
        "process.parent.group.id": "keyword",
        "process.parent.group.name": "keyword",
        "process.parent.group_leader.entity_id": "keyword",
        "process.parent.group_leader.pid": "long",
        "process.parent.group_leader.start": "date",
        "process.parent.hash.md5": "keyword",
        "process.parent.hash.sha1": "keyword",
        "process.parent.hash.sha256": "keyword",
        "process.parent.hash.sha384": "keyword",
        "process.parent.hash.sha512": "keyword",
        "process.parent.hash.ssdeep": "keyword",
        "process.parent.hash.tlsh": "keyword",
        "process.parent.interactive": "boolean",
        "process.parent.name": "keyword",
        "process.parent.pe.architecture": "keyword",
        "process.parent.pe.company": "keyword",
        "process.parent.pe.description": "keyword",
        "process.parent.pe.file_version": "keyword",
        "process.parent.pe.imphash": "keyword",
        "process.parent.pe.original_file_name": "keyword",
        "process.parent.pe.pehash": "keyword",
        "process.parent.pe.product": "keyword",
        "process.parent.pgid": "long",
        "process.parent.pid": "long",
        "process.parent.real_group.id": "keyword",
        "process.parent.real_group.name": "keyword",
        "process.parent.real_user.id": "keyword",
        "process.parent.real_user.name": "keyword",
        "process.parent.saved_group.id": "keyword",
        "process.parent.saved_group.name": "keyword",
        "process.parent.saved_user.id": "keyword",
        "process.parent.saved_user.name": "keyword",
        "process.parent.start": "date",
        "process.parent.supplemental_groups.id": "keyword",
        "process.parent.supplemental_groups.name": "keyword",
        "process.parent.thread.id": "long",
        "process.parent.thread.name": "keyword",
        "process.parent.title": "keyword",
        "process.parent.uptime": "long",
        "process.parent.user.id": "keyword",
        "process.parent.user.name": "keyword",
        "process.parent.working_directory": "keyword",
        "process.pe.architecture": "keyword",
        "process.pe.company": "keyword",
        "process.pe.description": "keyword",
        "process.pe.file_version": "keyword",
        "process.pe.imphash": "keyword",
        "process.pe.original_file_name": "keyword",
        "process.pe.pehash": "keyword",
        "process.pe.product": "keyword",
        "process.pgid": "long",
        "process.pid": "long",
        "process.previous.args_count": "long",
        "process.previous.executable": "keyword",
        "process.real_group.id": "keyword",
        "process.real_group.name": "keyword",
        "process.real_user.id": "keyword",
        "process.real_user.name": "keyword",
        "process.saved_group.id": "keyword",
        "process.saved_group.name": "keyword",
        "process.saved_user.id": "keyword",
        "process.saved_user.name": "keyword",
        "process.session_leader.args_count": "long",
        "process.session_leader.command_line": "keyword",
        "process.session_leader.entity_id": "keyword",
        "process.session_leader.executable": "keyword",
        "process.session_leader.group.id": "keyword",
        "process.session_leader.group.name": "keyword",
        "process.session_leader.interactive": "boolean",
        "process.session_leader.name": "keyword",
        "process.session_leader.parent.entity_id": "keyword",
        "process.session_leader.parent.pid": "long",
        "process.session_leader.parent.session_leader.entity_id": "keyword",
        "process.session_leader.parent.session_leader.pid": "long",
        "process.session_leader.parent.session_leader.start": "date",
        "process.session_leader.parent.start": "date",
        "process.session_leader.pid": "long",
        "process.session_leader.real_group.id": "keyword",
        "process.session_leader.real_group.name": "keyword",
        "process.session_leader.real_user.id": "keyword",
        "process.session_leader.real_user.name": "keyword",
        "process.session_leader.same_as_process": "boolean",
        "process.session_leader.saved_group.id": "keyword",
        "process.session_leader.saved_group.name": "keyword",
        "process.session_leader.saved_user.id": "keyword",
        "process.session_leader.saved_user.name": "keyword",
        "process.session_leader.start": "date",
        "process.session_leader.supplemental_groups.id": "keyword",
        "process.session_leader.supplemental_groups.name": "keyword",
        "process.session_leader.user.id": "keyword",
        "process.session_leader.user.name": "keyword",
        "process.session_leader.working_directory": "keyword",
        "process.start": "date",
        "process.supplemental_groups.id": "keyword",
        "process.supplemental_groups.name": "keyword",
        "process.thread.id": "long",
        "process.thread.name": "keyword",
        "process.title": "keyword",
        "process.uptime": "long",
        "process.user.id": "keyword",
        "process.user.name": "keyword",
        "process.working_directory": "keyword",
        "registry.data.bytes": "keyword",
        "registry.data.type": "keyword",
        "registry.hive": "keyword",
        "registry.key": "keyword",
        "registry.path": "keyword",
        "registry.value": "keyword",
        "rule.category": "keyword",
        "rule.description": "keyword",
        "rule.id": "keyword",
        "rule.license": "keyword",
        "rule.name": "keyword",
        "rule.reference": "keyword",
        "rule.ruleset": "keyword",
        "rule.uuid": "keyword",
        "rule.version": "keyword",
        "server.address": "keyword",
        "server.as.number": "long",
        "server.as.organization.name": "keyword",
        "server.bytes": "long",
        "server.domain": "keyword",
        "server.geo.city_name": "keyword",
        "server.geo.continent_code": "keyword",
        "server.geo.continent_name": "keyword",
        "server.geo.country_iso_code": "keyword",
        "server.geo.country_name": "keyword",
        "server.geo.location": "geo_point",
        "server.geo.name": "keyword",
        "server.geo.postal_code": "keyword",
        "server.geo.region_iso_code": "keyword",
        "server.geo.region_name": "keyword",
        "server.geo.timezone": "keyword",
        "server.ip": "ip",
        "server.mac": "keyword",
        "server.nat.ip": "ip",
        "server.nat.port": "long",
        "server.packets": "long",
        "server.port": "long",
        "server.registered_domain": "keyword",
        "server.subdomain": "keyword",
        "server.top_level_domain": "keyword",
        "server.user.domain": "keyword",
        "server.user.email": "keyword",
        "server.user.full_name": "keyword",
        "server.user.group.domain": "keyword",
        "server.user.group.id": "keyword",
        "server.user.group.name": "keyword",
        "server.user.hash": "keyword",
        "server.user.id": "keyword",
        "server.user.name": "keyword",
        "server.user.risk.calculated_level": "keyword",
        "server.user.risk.calculated_score": "float",
        "server.user.risk.calculated_score_norm": "float",
        "server.user.risk.static_level": "keyword",
        "server.user.risk.static_score": "float",
        "server.user.risk.static_score_norm": "float",
        "service.address": "keyword",
        "service.environment": "keyword",
        "service.ephemeral_id": "keyword",
        "service.id": "keyword",
        "service.name": "keyword",
        "service.node.name": "keyword",
        "service.node.role": "keyword",
        "service.origin.address": "keyword",
        "service.origin.environment": "keyword",
        "service.origin.ephemeral_id": "keyword",
        "service.origin.id": "keyword",
        "service.origin.name": "keyword",
        "service.origin.node.name": "keyword",
        "service.origin.node.role": "keyword",
        "service.origin.state": "keyword",
        "service.origin.type": "keyword",
        "service.origin.version": "keyword",
        "service.state": "keyword",
        "service.target.address": "keyword",
        "service.target.environment": "keyword",
        "service.target.ephemeral_id": "keyword",
        "service.target.id": "keyword",
        "service.target.name": "keyword",
        "service.target.node.name": "keyword",
        "service.target.node.role": "keyword",
        "service.target.state": "keyword",
        "service.target.type": "keyword",
        "service.target.version": "keyword",
        "service.type": "keyword",
        "service.version": "keyword",
        "source.address": "keyword",
        "source.as.number": "long",
        "source.as.organization.name": "keyword",
        "source.bytes": "long",
        "source.domain": "keyword",
        "source.geo.city_name": "keyword",
        "source.geo.continent_code": "keyword",
        "source.geo.continent_name": "keyword",
        "source.geo.country_iso_code": "keyword",
        "source.geo.country_name": "keyword",
        "source.geo.location": "geo_point",
        "source.geo.name": "keyword",
        "source.geo.postal_code": "keyword",
        "source.geo.region_iso_code": "keyword",
        "source.geo.region_name": "keyword",
        "source.geo.timezone": "keyword",
        "source.ip": "ip",
        "source.mac": "keyword",
        "source.nat.ip": "ip",
        "source.nat.port": "long",
        "source.packets": "long",
        "source.port": "long",
        "source.registered_domain": "keyword",
        "source.subdomain": "keyword",
        "source.top_level_domain": "keyword",
        "source.user.domain": "keyword",
        "source.user.email": "keyword",
        "source.user.full_name": "keyword",
        "source.user.group.domain": "keyword",
        "source.user.group.id": "keyword",
        "source.user.group.name": "keyword",
        "source.user.hash": "keyword",
        "source.user.id": "keyword",
        "source.user.name": "keyword",
        "source.user.risk.calculated_level": "keyword",
        "source.user.risk.calculated_score": "float",
        "source.user.risk.calculated_score_norm": "float",
        "source.user.risk.static_level": "keyword",
        "source.user.risk.static_score": "float",
        "source.user.risk.static_score_norm": "float",
        "span.id": "keyword",
        "threat.feed.dashboard_id": "keyword",
        "threat.feed.description": "keyword",
        "threat.feed.name": "keyword",
        "threat.feed.reference": "keyword",
        "threat.framework": "keyword",
        "threat.group.id": "keyword",
        "threat.group.name": "keyword",
        "threat.group.reference": "keyword",
        "threat.indicator.as.number": "long",
        "threat.indicator.as.organization.name": "keyword",
        "threat.indicator.confidence": "keyword",
        "threat.indicator.description": "keyword",
        "threat.indicator.email.address": "keyword",
        "threat.indicator.file.accessed": "date",
        "threat.indicator.file.code_signature.digest_algorithm": "keyword",
        "threat.indicator.file.code_signature.exists": "boolean",
        "threat.indicator.file.code_signature.signing_id": "keyword",
        "threat.indicator.file.code_signature.status": "keyword",
        "threat.indicator.file.code_signature.subject_name": "keyword",
        "threat.indicator.file.code_signature.team_id": "keyword",
        "threat.indicator.file.code_signature.timestamp": "date",
        "threat.indicator.file.code_signature.trusted": "boolean",
        "threat.indicator.file.code_signature.valid": "boolean",
        "threat.indicator.file.created": "date",
        "threat.indicator.file.ctime": "date",
        "threat.indicator.file.device": "keyword",
        "threat.indicator.file.directory": "keyword",
        "threat.indicator.file.drive_letter": "keyword",
        "threat.indicator.file.elf.architecture": "keyword",
        "threat.indicator.file.elf.byte_order": "keyword",
        "threat.indicator.file.elf.cpu_type": "keyword",
        "threat.indicator.file.elf.creation_date": "date",
        "threat.indicator.file.elf.header.abi_version": "keyword",
        "threat.indicator.file.elf.header.class": "keyword",
        "threat.indicator.file.elf.header.data": "keyword",
        "threat.indicator.file.elf.header.entrypoint": "long",
        "threat.indicator.file.elf.header.object_version": "keyword",
        "threat.indicator.file.elf.header.os_abi": "keyword",
        "threat.indicator.file.elf.header.type": "keyword",
        "threat.indicator.file.elf.header.version": "keyword",
        "threat.indicator.file.elf.telfhash": "keyword",
        "threat.indicator.file.extension": "keyword",
        "threat.indicator.file.fork_name": "keyword",
        "threat.indicator.file.gid": "keyword",
        "threat.indicator.file.group": "keyword",
        "threat.indicator.file.hash.md5": "keyword",
        "threat.indicator.file.hash.sha1": "keyword",
        "threat.indicator.file.hash.sha256": "keyword",
        "threat.indicator.file.hash.sha384": "keyword",
        "threat.indicator.file.hash.sha512": "keyword",
        "threat.indicator.file.hash.ssdeep": "keyword",
        "threat.indicator.file.hash.tlsh": "keyword",
        "threat.indicator.file.inode": "keyword",
        "threat.indicator.file.mime_type": "keyword",
        "threat.indicator.file.mode": "keyword",
        "threat.indicator.file.mtime": "date",
        "threat.indicator.file.name": "keyword",
        "threat.indicator.file.owner": "keyword",
        "threat.indicator.file.path": "keyword",
        "threat.indicator.file.pe.architecture": "keyword",
        "threat.indicator.file.pe.company": "keyword",
        "threat.indicator.file.pe.description": "keyword",
        "threat.indicator.file.pe.file_version": "keyword",
        "threat.indicator.file.pe.imphash": "keyword",
        "threat.indicator.file.pe.original_file_name": "keyword",
        "threat.indicator.file.pe.pehash": "keyword",
        "threat.indicator.file.pe.product": "keyword",
        "threat.indicator.file.size": "long",
        "threat.indicator.file.target_path": "keyword",
        "threat.indicator.file.type": "keyword",
        "threat.indicator.file.uid": "keyword",
        "threat.indicator.file.x509.issuer.distinguished_name": "keyword",
        "threat.indicator.file.x509.not_after": "date",
        "threat.indicator.file.x509.not_before": "date",
        "threat.indicator.file.x509.public_key_algorithm": "keyword",
        "threat.indicator.file.x509.public_key_curve": "keyword",
        "threat.indicator.file.x509.public_key_exponent": "long",
        "threat.indicator.file.x509.public_key_size": "long",
        "threat.indicator.file.x509.serial_number": "keyword",
        "threat.indicator.file.x509.signature_algorithm": "keyword",
        "threat.indicator.file.x509.subject.distinguished_name": "keyword",
        "threat.indicator.file.x509.version_number": "keyword",
        "threat.indicator.first_seen": "date",
        "threat.indicator.geo.city_name": "keyword",
        "threat.indicator.geo.continent_code": "keyword",
        "threat.indicator.geo.continent_name": "keyword",
        "threat.indicator.geo.country_iso_code": "keyword",
        "threat.indicator.geo.country_name": "keyword",
        "threat.indicator.geo.location": "geo_point",
        "threat.indicator.geo.name": "keyword",
        "threat.indicator.geo.postal_code": "keyword",
        "threat.indicator.geo.region_iso_code": "keyword",
        "threat.indicator.geo.region_name": "keyword",
        "threat.indicator.geo.timezone": "keyword",
        "threat.indicator.ip": "ip",
        "threat.indicator.last_seen": "date",
        "threat.indicator.marking.tlp": "keyword",
        "threat.indicator.modified_at": "date",
        "threat.indicator.port": "long",
        "threat.indicator.provider": "keyword",
        "threat.indicator.reference": "keyword",
        "threat.indicator.registry.data.bytes": "keyword",
        "threat.indicator.registry.data.type": "keyword",
        "threat.indicator.registry.hive": "keyword",
        "threat.indicator.registry.key": "keyword",
        "threat.indicator.registry.path": "keyword",
        "threat.indicator.registry.value": "keyword",
        "threat.indicator.scanner_stats": "long",
        "threat.indicator.sightings": "long",
        "threat.indicator.type": "keyword",
        "threat.indicator.url.domain": "keyword",
        "threat.indicator.url.extension": "keyword",
        "threat.indicator.url.fragment": "keyword",
        "threat.indicator.url.full": "keyword",
        "threat.indicator.url.original": "keyword",
        "threat.indicator.url.password": "keyword",
        "threat.indicator.url.path": "keyword",
        "threat.indicator.url.port": "long",
        "threat.indicator.url.query": "keyword",
        "threat.indicator.url.registered_domain": "keyword",
        "threat.indicator.url.scheme": "keyword",
        "threat.indicator.url.subdomain": "keyword",
        "threat.indicator.url.top_level_domain": "keyword",
        "threat.indicator.url.username": "keyword",
        "threat.indicator.x509.issuer.distinguished_name": "keyword",
        "threat.indicator.x509.not_after": "date",
        "threat.indicator.x509.not_before": "date",
        "threat.indicator.x509.public_key_algorithm": "keyword",
        "threat.indicator.x509.public_key_curve": "keyword",
        "threat.indicator.x509.public_key_exponent": "long",
        "threat.indicator.x509.public_key_size": "long",
        "threat.indicator.x509.serial_number": "keyword",
        "threat.indicator.x509.signature_algorithm": "keyword",
        "threat.indicator.x509.subject.distinguished_name": "keyword",
        "threat.indicator.x509.version_number": "keyword",
        "threat.software.id": "keyword",
        "threat.software.name": "keyword",
        "threat.software.reference": "keyword",
        "threat.software.type": "keyword",
        "tls.cipher": "keyword",
        "tls.client.certificate": "keyword",
        "tls.client.hash.md5": "keyword",
        "tls.client.hash.sha1": "keyword",
        "tls.client.hash.sha256": "keyword",
        "tls.client.issuer": "keyword",
        "tls.client.ja3": "keyword",
        "tls.client.not_after": "date",
        "tls.client.not_before": "date",
        "tls.client.server_name": "keyword",
        "tls.client.subject": "keyword",
        "tls.client.x509.issuer.distinguished_name": "keyword",
        "tls.client.x509.not_after": "date",
        "tls.client.x509.not_before": "date",
        "tls.client.x509.public_key_algorithm": "keyword",
        "tls.client.x509.public_key_curve": "keyword",
        "tls.client.x509.public_key_exponent": "long",
        "tls.client.x509.public_key_size": "long",
        "tls.client.x509.serial_number": "keyword",
        "tls.client.x509.signature_algorithm": "keyword",
        "tls.client.x509.subject.distinguished_name": "keyword",
        "tls.client.x509.version_number": "keyword",
        "tls.curve": "keyword",
        "tls.established": "boolean",
        "tls.next_protocol": "keyword",
        "tls.resumed": "boolean",
        "tls.server.certificate": "keyword",
        "tls.server.hash.md5": "keyword",
        "tls.server.hash.sha1": "keyword",
        "tls.server.hash.sha256": "keyword",
        "tls.server.issuer": "keyword",
        "tls.server.ja3s": "keyword",
        "tls.server.not_after": "date",
        "tls.server.not_before": "date",
        "tls.server.subject": "keyword",
        "tls.server.x509.issuer.distinguished_name": "keyword",
        "tls.server.x509.not_after": "date",
        "tls.server.x509.not_before": "date",
        "tls.server.x509.public_key_algorithm": "keyword",
        "tls.server.x509.public_key_curve": "keyword",
        "tls.server.x509.public_key_exponent": "long",
        "tls.server.x509.public_key_size": "long",
        "tls.server.x509.serial_number": "keyword",
        "tls.server.x509.signature_algorithm": "keyword",
        "tls.server.x509.subject.distinguished_name": "keyword",
        "tls.server.x509.version_number": "keyword",
        "tls.version": "keyword",
        "tls.version_protocol": "keyword",
        "trace.id": "keyword",
        "transaction.id": "keyword",
        "url.domain": "keyword",
        "url.extension": "keyword",
        "url.fragment": "keyword",
        "url.full": "keyword",
        "url.original": "keyword",
        "url.password": "keyword",
        "url.path": "keyword",
        "url.port": "long",
        "url.query": "keyword",
        "url.registered_domain": "keyword",
        "url.scheme": "keyword",
        "url.subdomain": "keyword",
        "url.top_level_domain": "keyword",
        "url.username": "keyword",
        "user.changes.domain": "keyword",
        "user.changes.email": "keyword",
        "user.changes.full_name": "keyword",
        "user.changes.group.domain": "keyword",
        "user.changes.group.id": "keyword",
        "user.changes.group.name": "keyword",
        "user.changes.hash": "keyword",
        "user.changes.id": "keyword",
        "user.changes.name": "keyword",
        "user.changes.risk.calculated_level": "keyword",
        "user.changes.risk.calculated_score": "float",
        "user.changes.risk.calculated_score_norm": "float",
        "user.changes.risk.static_level": "keyword",
        "user.changes.risk.static_score": "float",
        "user.changes.risk.static_score_norm": "float",
        "user.domain": "keyword",
        "user.effective.domain": "keyword",
        "user.effective.email": "keyword",
        "user.effective.full_name": "keyword",
        "user.effective.group.domain": "keyword",
        "user.effective.group.id": "keyword",
        "user.effective.group.name": "keyword",
        "user.effective.hash": "keyword",
        "user.effective.id": "keyword",
        "user.effective.name": "keyword",
        "user.effective.risk.calculated_level": "keyword",
        "user.effective.risk.calculated_score": "float",
        "user.effective.risk.calculated_score_norm": "float",
        "user.effective.risk.static_level": "keyword",
        "user.effective.risk.static_score": "float",
        "user.effective.risk.static_score_norm": "float",
        "user.email": "keyword",
        "user.full_name": "keyword",
        "user.group.domain": "keyword",
        "user.group.id": "keyword",
        "user.group.name": "keyword",
        "user.hash": "keyword",
        "user.id": "keyword",
        "user.name": "keyword",
        "user.risk.calculated_level": "keyword",
        "user.risk.calculated_score": "float",
        "user.risk.calculated_score_norm": "float",
        "user.risk.static_level": "keyword",
        "user.risk.static_score": "float",
        "user.risk.static_score_norm": "float",
        "user.target.domain": "keyword",
        "user.target.email": "keyword",
        "user.target.full_name": "keyword",
        "user.target.group.domain": "keyword",
        "user.target.group.id": "keyword",
        "user.target.group.name": "keyword",
        "user.target.hash": "keyword",
        "user.target.id": "keyword",
        "user.target.name": "keyword",
        "user.target.risk.calculated_level": "keyword",
        "user.target.risk.calculated_score": "float",
        "user.target.risk.calculated_score_norm": "float",
        "user.target.risk.static_level": "keyword",
        "user.target.risk.static_score": "float",
        "user.target.risk.static_score_norm": "float",
        "user_agent.device.name": "keyword",
        "user_agent.name": "keyword",
        "user_agent.original": "keyword",
        "user_agent.os.family": "keyword",
        "user_agent.os.full": "keyword",
        "user_agent.os.kernel": "keyword",
        "user_agent.os.name": "keyword",
        "user_agent.os.platform": "keyword",
        "user_agent.os.type": "keyword",
        "user_agent.os.version": "keyword",
        "user_agent.version": "keyword",
        "vulnerability.classification": "keyword",
        "vulnerability.description": "keyword",
        "vulnerability.enumeration": "keyword",
        "vulnerability.id": "keyword",
        "vulnerability.reference": "keyword",
        "vulnerability.report_id": "keyword",
        "vulnerability.scanner.vendor": "keyword",
        "vulnerability.score.base": "float",
        "vulnerability.score.environmental": "float",
        "vulnerability.score.temporal": "float",
        "vulnerability.score.version": "keyword",
        "vulnerability.severity": "keyword",
        "wazuh.queue": "long",
        "wazuh.location": "text",
        "wazuh.message": "text",
        "wazuh.origin": "keyword",
        "wazuh.registered_ip": "keyword",
        "wazuh.source": "keyword",
        "url": "url",
        "user_agent": "useragent"
    }
})";

} // namespace assets
} // namespace graph
#endif // _GRAPH_FAKE_ASSETS_HPP
